Support wildcard CORS origin via PASEO_CORS_ORIGINS=*

2026-04-10 10:35:48 +07:00
parent 34bd8dfd1b
commit edd5503fe8
1 changed files with 1 additions and 1 deletions
@@ -254,7 +254,7 @@ export async function createPaseoDaemon(

    app.use((req, res, next) => {
      const origin = req.headers.origin;
-      if (origin && allowedOrigins.has(origin)) {
+      if (origin && (allowedOrigins.has("*") || allowedOrigins.has(origin))) {
        res.setHeader("Access-Control-Allow-Origin", origin);
        res.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
        res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");